Tracked topic
…And a use-after-free weakness in Dawn (CVE-2026-5281), the underlying cross-platform implementation of the WebGPU standard used by the Chromium project, which Google patched in April . Last year…
…Once attackers have valid credentials, only 37% of their actions are blocked Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply. The…
CISA warns of cyberattacks disrupting U.S. water utilities By Bill Toulas July 31, 2026 12:49 PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant…
…The median fix time for known-exploited vulnerabilities is now 43 days, up from 32 last year. The share of organizations fully patching them is down from 38% to 26%. Even the…
…Over the last five years, the U.S. cybersecurity agency has flagged 22 Citrix vulnerabilities as exploited in the wild, six of them also abused in ransomware attacks. The ShadowServer Foundation now…
…Microsoft fixed the YellowKey, GreenPlasma, and MiniPlasma flaws last month as part of the June 2026 Patch Tuesday updates and the RoguePlanet vulnerability in the July security updates . However, the other security…
…of over 73,000 employees in the French public sector. DINUM, the French government's digital affairs directorate, disclosed on Monday that a threat actor gained access to the Tchap platform using…
…ShinyHunters told BleepingComputer that they are using a "gadget chain" of zero-days and old vulnerabilities in the attacks, adding that the attack is not working on all systems, likely because successful…
…Microsoft fixed the GreenPlasma, MiniPlasma, and YellowKey flaws last month as part of the June 2026 Patch Tuesday updates and the RoguePlanet vulnerability in the July security updates . Microsoft responded to Nightmare…
…Incode compressed both to roughly a tenth of their original size using knowledge distillation -- a technique in which a compact model is trained to reproduce the judgments of a much larger, more…